napp[.]krakena2[.]com

The domain napp.krakena2.com has been identified as a brand impersonation phishing site specifically targeting Kraken, a well-known cryptocurrency exchange. Currently offline, this domain was designed to deceive users into believing they were interacting with legitimate Kraken services. The page title observed was 'Email Marketing | Welcome', which is inconsistent with Kraken's official branding and suggests a credential harvesting or crypto drainer operation.

Technical analysis reveals that napp.krakena2.com was created on August 11, 2025, and registered through GoDaddy.com, LLC. It resolves to IP address 209.222.101.13 and uses an SSL certificate issued by Let's Encrypt (R13), which is commonly abused by phishing sites to appear legitimate. The domain appears on one security blocklist and has been flagged by 3 out of 95 VirusTotal security vendors, indicating moderate detection but still a significant threat. The unique seed c7249c was used to track this specific instance.

Although the domain has been taken offline, users should remain vigilant. PhishDestroy recommends that anyone who may have interacted with this site change their Kraken account credentials immediately and enable two-factor authentication. Always verify URLs by navigating directly to official Kraken websites rather than clicking links in unsolicited messages. Report any similar suspicious domains to PhishDestroy to help protect the community.